Does HIPAA override state laws that are more restrictive, such as those protecting minors?

Does HIPAA override state laws that are more restrictive, such as those protecting minors?

• A. Yes, HIPAA overrides all state laws.
• B. No, HIPAA does not override more restrictive state laws.
• C. HIPAA is only applicable to adults.
• D. State laws have no impact on HIPAA applicability.

Answer: (B)

HIPAA provides a federal privacy baseline, but it does not automatically override state laws that are more protective. When a state enacts stricter privacy protections for minors, those protections still apply and govern how information can be shared. Providers must follow the stricter state rule in addition to HIPAA, because HIPAA permits states to impose these heightened protections and does not intend to weaken them. In practice, state laws can limit disclosures or require consent in ways that HIPAA alone wouldn’t require, so the more restrictive rule stands. The other options miss this relationship: HIPAA doesn’t override all state laws, it applies to people of all ages, and state laws can and do impact how HIPAA is applied.

HIPAA provides a federal privacy baseline, but it does not automatically override state laws that are more protective. When a state enacts stricter privacy protections for minors, those protections still apply and govern how information can be shared. Providers must follow the stricter state rule in addition to HIPAA, because HIPAA permits states to impose these heightened protections and does not intend to weaken them. In practice, state laws can limit disclosures or require consent in ways that HIPAA alone wouldn’t require, so the more restrictive rule stands. The other options miss this relationship: HIPAA doesn’t override all state laws, it applies to people of all ages, and state laws can and do impact how HIPAA is applied.